{"id":"b95e5dbc-e9c8-4dfa-acea-c7cdcb3f4995","url":"https://ot-intel-api.onrender.com/ot/detection?target=PIPEDREAM","method":"GET","fingerprint":"e90eeaa2857a4d794876940b4c07fe048c3ac2fb5942daafe489ea270f91e284","name":null,"description":null,"category":"other","docs_url":null,"advertised_price_usd":"0.050000","asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","scheme":"exact","networks":["eip155:8453"],"pay_to":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","input_schema":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"format":{"type":"string","description":"Rule format: yara | sigma | snort | all (default: all)"},"target":{"type":"string","description":"Malware or actor name e.g. PIPEDREAM, INDUSTROYER2, TRITON, SANDWORM, CHERNOVITE"}}}},"additionalProperties":false},"output_schema":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}},"schema_completeness":0,"status":"live","first_seen_at":"2026-08-23 22:54:14.113594+00","last_seen_at":"2026-08-23 22:54:13.775+00","last_success_at":"2026-09-14 16:45:00.907+00","dead_since":null,"probe_backoff_tier":0,"next_probe_at":"2026-09-14 16:50:00.907+00","search_tsv":"","catalog_number":"8777","x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/detection?target=PIPEDREAM","resource_description":"ICS detection artifact retrieval. Pass ?target=PIPEDREAM or ?target=SANDWORM&format=sigma. Returns YARA/Sigma rules for the target malware or actor, sourced from public corpus (Florian Roth signature-base, CISA advisories) with validated:true, or DeepSeek-synthesised with validated:false. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs — validated:true rules are safe to deploy; validated:false require lab testing first.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"target":"PIPEDREAM"}},"output":{"type":"json","example":{"target":"PIPEDREAM","freshness":"2026-06-19T10:00:00Z","signatures":[{"type":"YARA","source":"manual","raw_rule":"rule PIPEDREAM_INCONTROLLER_Loader { meta: ... strings: ... condition: ... }","rule_name":"PIPEDREAM_INCONTROLLER_Loader","validated":false,"ot_safe_note":"Synthesised from CISA advisory AA22-103A. Test against OT baseline before SIEM deployment.","target_layer":"engineering_workstation"}],"data_sources":["OT-Intel-DB","DeepSeek-CTI-Analysis"],"artifact_type":"malware","validated_count":0,"synthesised_count":1,"ot_safe_validation":"0 of 1 rules sourced from public corpus. Rules with validated:false require lab testing before production deployment."}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"format":{"type":"string","description":"Rule format: yara | sigma | snort | all (default: all)"},"target":{"type":"string","description":"Malware or actor name e.g. PIPEDREAM, INDUSTROYER2, TRITON, SANDWORM, CHERNOVITE"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"50000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"50000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 16:45:00.907+00","bazaar_validation_error":null,"window":"24h","probes_n":20,"handshake_uptime":1,"settle_success_rate":0,"valid_result_rate":null,"latency_p50":496,"latency_p90":2813,"price_drift_pct":0,"score":0.7554,"computed_at":"2026-09-14 16:45:39.844+00","source_metadata":[{"raw":{"url":"https://ot-intel-api.onrender.com/ot/detection?target=PIPEDREAM","method":"GET","source":"bazaar:api.cdp.coinbase.com","fingerprint":"e90eeaa2857a4d794876940b4c07fe048c3ac2fb5942daafe489ea270f91e284","advertisedPriceUsd":0.05},"source_id":1,"external_id":null}],"live_endpoint_metadata":{"x402_version":2,"resource_url":"https://ot-intel-api.onrender.com/ot/detection?target=PIPEDREAM","resource_description":"ICS detection artifact retrieval. Pass ?target=PIPEDREAM or ?target=SANDWORM&format=sigma. Returns YARA/Sigma rules for the target malware or actor, sourced from public corpus (Florian Roth signature-base, CISA advisories) with validated:true, or DeepSeek-synthesised with validated:false. Designed for automated threat hunting pipelines that commit rules to SIEMs and EDRs — validated:true rules are safe to deploy; validated:false require lab testing first.","bazaar_extension":{"info":{"input":{"type":"http","method":"GET","queryParams":{"target":"PIPEDREAM"}},"output":{"type":"json","example":{"target":"PIPEDREAM","freshness":"2026-06-19T10:00:00Z","signatures":[{"type":"YARA","source":"manual","raw_rule":"rule PIPEDREAM_INCONTROLLER_Loader { meta: ... strings: ... condition: ... }","rule_name":"PIPEDREAM_INCONTROLLER_Loader","validated":false,"ot_safe_note":"Synthesised from CISA advisory AA22-103A. Test against OT baseline before SIEM deployment.","target_layer":"engineering_workstation"}],"data_sources":["OT-Intel-DB","DeepSeek-CTI-Analysis"],"artifact_type":"malware","validated_count":0,"synthesised_count":1,"ot_safe_validation":"0 of 1 rules sourced from public corpus. Rules with validated:false require lab testing before production deployment."}}},"schema":{"type":"object","$schema":"https://json-schema.org/draft/2020-12/schema","required":["input"],"properties":{"input":{"type":"object","required":["type","method"],"properties":{"type":{"type":"string","const":"http"},"method":{"enum":["GET"],"type":"string"},"queryParams":{"type":"object","required":["target"],"properties":{"format":{"type":"string","description":"Rule format: yara | sigma | snort | all (default: all)"},"target":{"type":"string","description":"Malware or actor name e.g. PIPEDREAM, INDUSTROYER2, TRITON, SANDWORM, CHERNOVITE"}}}},"additionalProperties":false},"output":{"type":"object","required":["type"],"properties":{"type":{"type":"string"},"example":{"type":"object"}}}}}},"accepted_requirements":[{"raw":{"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","extra":{"name":"USD Coin","version":"2"},"payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","amount":"50000","scheme":"exact","network":"eip155:8453","maxTimeoutSeconds":300},"asset":"0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913","payTo":"0x1888192FAc6a69e4cd7d078eC4bCf6F24f7C767B","scheme":"exact","network":"eip155:8453","amountAtomic":"50000"}],"bazaar_compatible":true,"bazaar_validated_at":"2026-09-14 16:45:00.907+00","bazaar_validation_error":null},"sonar_metrics":{"score":0.7554,"uptime":1,"paid_success_rate":0,"valid_result_rate":null,"latency_p50":496,"latency_p90":2813,"price_drift_pct":0},"cdp_indexed":false,"confidence":"high"}